This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.mft
File:                     22E20380327B2CB679071D7FE9AC4DBFA317A166.mft (raw, json)
Hash identifier:          TLElkckgd8hlZd9YqPh6LctdWZtwvAOhOmq327863fM=
Subject key identifier:   09:7B:1E:49:A7:13:94:44:D8:18:42:1A:2F:72:37:04:26:A8:D0:B4
Authority key identifier: 22:E2:03:80:32:7B:2C:B6:79:07:1D:7F:E9:AC:4D:BF:A3:17:A1:66
Certificate issuer:       /CN=22E20380327B2CB679071D7FE9AC4DBFA317A166
Certificate serial:       527906E9A0FCF71DC61C062B25DB20029F9BB18A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.mft
Manifest number:          0143
Signing time:             Thu 04 Dec 2025 09:29:21 +0000
Manifest this update:     Thu 04 Dec 2025 09:24:21 +0000
Manifest next update:     Wed 10 Dec 2025 06:46:21 +0000
Files and hashes:         1: 34352e3233382e3138382e302f32342d3234203d3e20323635353531.roa (hash: UNybL6PHxf0Yt1ZOejKPagOyNMGcys8IsNQzpyLiQ80=)
                          2: 34352e3233382e3138392e302f32342d3234203d3e20323635353531.roa (hash: 93gQNp3LNkgv0j6aBclSNsGHCQPZJUgZ2x8T7UqlR4c=)
                          3: 22E20380327B2CB679071D7FE9AC4DBFA317A166.crl (hash: 72Jj7UG6n8DDM9q1OBgzIbeEv2EySlxFN9SkXN1nSgY=)
                          4: 34352e3233382e3139312e302f32342d3234203d3e20323635353531.roa (hash: u/47eDPo4nH30DJjeuaG4CL6WKcq9nU5/rxM6fLdjIs=)
                          5: 34352e3233382e3139302e302f32342d3234203d3e20323635353531.roa (hash: /JeXD1gE9iRs2zraIVuon0Q3nosy32tIJXrcfF7sMGc=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 06:46:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:79:06:e9:a0:fc:f7:1d:c6:1c:06:2b:25:db:20:02:9f:9b:b1:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22E20380327B2CB679071D7FE9AC4DBFA317A166
        Validity
            Not Before: Dec  4 09:24:21 2025 GMT
            Not After : Dec 10 06:46:21 2025 GMT
        Subject: CN=097B1E49A7139444D818421A2F72370426A8D0B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e1:a0:20:49:fc:2f:45:17:7b:25:97:0e:e4:
                    5e:cd:38:e2:5a:dc:df:2c:1a:fd:68:d5:28:fb:7a:
                    6c:6e:45:43:77:36:ed:8f:f3:83:ca:c4:5f:48:3c:
                    96:02:ea:97:a6:bb:34:03:3c:44:28:89:77:c7:9c:
                    11:6c:08:e2:18:56:be:41:00:9b:97:23:4c:a6:06:
                    f3:2f:d3:53:e7:69:72:14:38:c0:16:24:f8:68:ff:
                    19:ed:45:21:5a:a8:26:90:f4:ef:c6:58:a5:c6:0d:
                    1a:6d:89:42:d5:cf:9c:4d:a1:e7:5e:48:4f:99:3c:
                    ed:04:64:ca:19:93:11:b4:d1:13:3b:96:25:89:c1:
                    5e:2e:09:75:ed:21:7a:74:53:e9:f4:93:94:2b:a7:
                    e9:3f:57:b5:6d:d5:ea:17:03:28:1b:5f:f6:7a:29:
                    16:fd:aa:e3:07:06:0c:b1:85:26:1a:37:c0:ef:e1:
                    72:6c:44:42:91:8e:f4:84:5f:2d:4a:88:a9:e0:c9:
                    1b:2c:ad:e5:8e:b5:27:8a:26:cb:0f:d3:ee:c3:b4:
                    5d:af:8d:f7:2a:45:49:91:86:5f:d8:f2:ff:cf:11:
                    e2:6e:fd:4b:04:13:37:e7:19:da:4f:43:03:58:1c:
                    3b:e2:4b:f3:14:de:a9:86:c3:29:9a:1e:87:f7:d1:
                    da:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:7B:1E:49:A7:13:94:44:D8:18:42:1A:2F:72:37:04:26:A8:D0:B4
            X509v3 Authority Key Identifier:
                keyid:22:E2:03:80:32:7B:2C:B6:79:07:1D:7F:E9:AC:4D:BF:A3:17:A1:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:49:f8:8a:8c:d1:b8:ba:d0:9c:9e:6f:e3:3d:db:3b:5d:0d:
         5e:fd:8a:55:0c:ec:f3:37:d3:2b:0a:be:5e:6b:35:1b:31:73:
         2f:48:4a:6b:bd:21:63:11:27:1f:fc:02:15:9d:45:40:c9:09:
         50:db:25:fd:f5:fa:4d:f1:f1:7c:02:e9:b3:34:83:ad:a1:fa:
         ad:44:ca:d4:61:42:d6:98:14:6f:75:94:58:9b:ce:aa:5f:2e:
         03:df:c4:ce:62:39:b5:3f:9f:0a:10:7b:62:2e:62:39:35:f4:
         4f:1a:54:7b:ad:fd:74:a9:99:c9:b0:14:85:27:a2:d4:75:6f:
         c8:06:46:89:99:7c:df:0f:c6:c9:90:27:25:18:11:14:c4:b4:
         ed:4f:42:26:7e:18:c0:26:b8:79:ff:ef:53:75:91:9c:aa:09:
         0b:ae:a7:e7:ca:77:de:aa:09:44:dc:1a:89:46:bd:f9:66:97:
         54:7c:ea:b8:5e:b2:7b:6c:38:96:06:46:e7:cb:e2:76:58:f1:
         d3:66:62:03:f0:2e:9b:9a:52:82:da:de:ad:2d:57:2e:01:06:
         1b:dc:46:aa:b4:1b:36:d3:f3:fc:84:89:c8:ac:56:06:b6:3e:
         00:08:21:07:6c:c8:cd:7b:ff:74:2d:34:c1:fc:85:29:42:b0:
         05:b6:68:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:26:15 2025 by rpki-client